Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
File: jl3HMsooNJc1R8eA4cOlq0eAW-A.mft (raw, json)
Hash identifier: hhGdMUlzgZZv9C+Upu1XoaSkw5mzM1zGhfEOXhlWazc=
Subject key identifier: 2B:4B:51:60:B7:E3:D0:3C:92:82:4E:37:8A:69:D7:D5:0B:86:ED:12
Authority key identifier: 8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
Certificate issuer: /CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Certificate serial: 019881679F675C88AA655F0262325E4DB032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
Manifest number: 1133
Signing time: Wed 06 Aug 2025 22:01:48 +0000
Manifest this update: Wed 06 Aug 2025 22:01:48 +0000
Manifest next update: Thu 07 Aug 2025 22:01:48 +0000
Files and hashes: 1: jl3HMsooNJc1R8eA4cOlq0eAW-A.crl (hash: tN+GGlnsChtBFkE5znF3CvWT24pNsM14Ow6NiiqMQV8=)
2: jlfdZHmVvHdz_53apg0OZWLxSVw.roa (hash: jgBY+KV60Sm5+edJ00g2iCkNCnIW/XdZGLc1p19ckko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:9f:67:5c:88:aa:65:5f:02:62:32:5e:4d:b0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5dc732ca2834973547c780e1c3a5ab47805be0
Validity
Not Before: Aug 6 22:01:48 2025 GMT
Not After : Aug 7 22:01:48 2025 GMT
Subject: CN=2b4b5160b7e3d03c92824e378a69d7d50b86ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:d2:57:13:ce:d6:76:f1:be:a6:d3:59:b2:
3b:95:3e:23:c8:5d:57:73:43:81:23:fd:23:4e:23:
77:d0:9e:65:8e:1b:80:55:56:fb:27:72:42:61:a2:
b5:de:c0:e4:51:a9:ef:a7:6e:05:84:c5:b7:7c:49:
d3:61:80:f7:30:f8:1d:00:9e:c2:6d:83:4c:12:03:
b7:1e:0b:a1:3b:7f:5d:8d:25:1f:e7:4a:0a:e5:ed:
57:09:41:3c:bf:b4:d6:28:54:71:35:dd:04:aa:3a:
ae:98:ee:7d:4d:43:99:41:8c:10:2f:21:1b:fc:0b:
5b:43:a4:ca:79:c1:3e:82:72:38:4e:fb:9e:10:70:
eb:5d:c4:b3:f4:e5:0b:1d:04:15:ad:ad:93:ea:f7:
25:a1:27:21:06:00:4f:d8:63:f4:7c:b5:51:0d:57:
1a:40:e5:e0:dd:cf:f0:48:98:0d:b5:b7:57:35:65:
ab:43:cd:a4:1f:83:08:0e:19:ae:08:4d:3b:35:bf:
3f:ac:bc:b7:c5:64:e0:a4:61:ad:20:55:c2:e8:66:
8e:d5:79:51:5f:91:4f:04:32:88:1e:bd:ce:82:f8:
12:34:c4:bb:89:d6:f1:c5:83:ec:f7:3f:6d:08:f0:
11:8a:12:0c:bc:d1:ac:8f:48:6b:1c:b4:9a:89:e3:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4B:51:60:B7:E3:D0:3C:92:82:4E:37:8A:69:D7:D5:0B:86:ED:12
X509v3 Authority Key Identifier:
keyid:8E:5D:C7:32:CA:28:34:97:35:47:C7:80:E1:C3:A5:AB:47:80:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jl3HMsooNJc1R8eA4cOlq0eAW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6ef146-dac6-4ea5-be58-4ee69a777bbe/1/jl3HMsooNJc1R8eA4cOlq0eAW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:28:bd:75:e3:d0:6c:1b:fc:fc:45:2c:86:2b:4a:bd:e4:36:
f8:14:81:82:ba:c9:6f:92:ea:c4:01:ba:80:05:2d:9a:ad:9c:
0a:19:2b:01:57:13:74:7b:05:22:29:ed:18:e2:af:a8:59:d7:
e5:d6:df:95:03:45:80:7d:ce:b0:e7:97:87:71:2a:b4:69:77:
04:cf:a3:df:ff:af:01:0e:f3:55:ac:7f:7a:ac:d0:e6:97:14:
91:52:29:32:e4:df:29:6e:a3:40:a9:e0:f0:02:cc:a0:c0:cd:
04:60:8a:b2:65:3d:61:41:f7:40:96:4e:a9:c2:da:e7:f2:7a:
b0:69:16:1f:1e:ca:8e:70:a9:df:da:20:b0:3c:ba:b6:83:21:
c2:8f:c1:18:19:20:6d:36:96:db:88:11:9e:1e:26:f0:9b:26:
c9:04:55:0a:9a:54:11:e6:6c:8b:5b:45:6a:be:1a:88:7e:59:
70:af:c9:0c:e8:87:ee:46:88:04:97:d1:1a:2d:e1:fb:19:fc:
47:8c:82:7e:0b:3b:09:7d:d8:45:f7:b9:2e:31:c4:c7:04:5b:
9d:f3:0b:55:1c:68:d5:b3:df:df:87:5d:d5:64:9c:bf:32:e3:
56:cf:4e:c7:ed:a8:e9:e0:80:1d:fe:be:79:48:86:8f:8c:75:
3f:91:65:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ59nXIiqZV8CYjJeTbAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNWRjNzMyY2EyODM0OTczNTQ3Yzc4MGUxYzNhNWFiNDc4
MDViZTAwHhcNMjUwODA2MjIwMTQ4WhcNMjUwODA3MjIwMTQ4WjAzMTEwLwYDVQQD
EygyYjRiNTE2MGI3ZTNkMDNjOTI4MjRlMzc4YTY5ZDdkNTBiODZlZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwbSVxPO1nbxvqbTWbI7lT4jyF1X
c0OBI/0jTiN30J5ljhuAVVb7J3JCYaK13sDkUanvp24FhMW3fEnTYYD3MPgdAJ7C
bYNMEgO3HguhO39djSUf50oK5e1XCUE8v7TWKFRxNd0EqjqumO59TUOZQYwQLyEb
/AtbQ6TKecE+gnI4TvueEHDrXcSz9OULHQQVra2T6vcloSchBgBP2GP0fLVRDVca
QOXg3c/wSJgNtbdXNWWrQ82kH4MIDhmuCE07Nb8/rLy3xWTgpGGtIFXC6GaO1XlR
X5FPBDKIHr3OgvgSNMS7idbxxYPs9z9tCPARihIMvNGsj0hrHLSaieNwjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtLUWC349A8koJON4pp19ULhu0SMB8GA1UdIwQY
MBaAFI5dxzLKKDSXNUfHgOHDpatHgFvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgt
NGVlNjlhNzc3YmJlLzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82ZWYxNDYtZGFjNi00ZWE1LWJlNTgtNGVlNjlhNzc3YmJl
LzEvamwzSE1zb29OSmMxUjhlQTRjT2xxMGVBVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3yi9dePQ
bBv8/EUshitKveQ2+BSBgrrJb5LqxAG6gAUtmq2cChkrAVcTdHsFIintGOKvqFnX
5dbflQNFgH3OsOeXh3EqtGl3BM+j3/+vAQ7zVax/eqzQ5pcUkVIpMuTfKW6jQKng
8ALMoMDNBGCKsmU9YUH3QJZOqcLa5/J6sGkWHx7KjnCp39ogsDy6toMhwo/BGBkg
bTaW24gRnh4m8JsmyQRVCppUEeZsi1tFar4aiH5ZcK/JDOiH7kaIBJfRGi3h+xn8
R4yCfgs7CX3YRfe5LjHExwRbnfMLVRxo1bPf34dd1WScvzLjVs9Ox+2o6eCAHf6+
eUiGj4x1P5FlgQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:19 2025 by rpki-client